SECUFOCUSNOW
Home›CVE index›CVE-2025-21687
Review reviewHigh

CVE-2025-21687

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

CVSS
7.8
EPSS
0.23%
13.7% percentile
CISA KEV
Not listed
Published
2025.02.11
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.23%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 6e3f264560099869f68830cb14b3b3e71e5ac76a < f21636f24b6786c8b13f1af4319fa75ffcf17f38, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < 9377cdc118cf327248f1a9dde7b87de067681dc9, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < d19a8650fd3d7aed8d1af1d9a77f979a8430eba1, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < ed81d82bb6e9df3a137f2c343ed689e6c68268ef, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < 92340e6c5122d823ad064984ef7513eba9204048, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < f65ce06387f8c1fb54bd59e18a8428248ec68eaf, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < 6bcb8a5b70b80143db9bf12dfa7d53636f824d53, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < 1485932496a1b025235af8aa1e21988d6b7ccd54, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < c981c32c38af80737a2fedc16e270546d139ccdd, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < a20fcaa230f7472456d12cf761ed13938e320ac3, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < 665cfd1083866f87301bbd232cb8ba48dcf4acce, >= 6e3f264560099869f68830cb14b3b3e71e5ac76a < ce9ff21ea89d191e477a02ad7eabf4f996b80a69, >= 4.1, >= 4.1 < 5.4.290, >= 5.5 < 5.10.234, >= 5.11 < 5.15.178, >= 5.16 < 6.1.128, >= 6.2 < 6.6.75, >= 6.7 < 6.12.12, 6.13
Fixed versions
5.4.290, 5.10.234, 5.15.178, 6.1.128, 6.6.75, 6.12.12

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-125, CWE-787